summaryrefslogtreecommitdiffstats
path: root/system/services/matrix
diff options
context:
space:
mode:
authorSoispha <soispha@vhack.eu>2023-10-13 18:19:21 +0200
committerSoispha <soispha@vhack.eu>2023-10-14 16:21:07 +0200
commit1fda2742810c69e9a4c574d77ac18f69a24bfb5e (patch)
tree50bc268bb09026017a7ec506802616323372c64b /system/services/matrix
parentfix(system/services/miniflux): Set correct subdomain, but leave alias (diff)
downloadnixos-server-1fda2742810c69e9a4c574d77ac18f69a24bfb5e.zip
Style(treewide): Merge attrs together
Diffstat (limited to '')
-rw-r--r--system/services/matrix/default.nix162
1 files changed, 82 insertions, 80 deletions
diff --git a/system/services/matrix/default.nix b/system/services/matrix/default.nix
index ed3b567..9148f66 100644
--- a/system/services/matrix/default.nix
+++ b/system/services/matrix/default.nix
@@ -18,98 +18,100 @@ in {
networking.firewall.allowedTCPPorts = [80 443];
- services.postgresql.enable = true;
- services.postgresql.initialScript = pkgs.writeText "synapse-init.sql" ''
- --Matrix:
- CREATE ROLE "matrix-synapse" WITH LOGIN PASSWORD 'synapse';
- CREATE DATABASE "matrix-synapse" WITH OWNER "matrix-synapse"
- TEMPLATE template0
- LC_COLLATE = "C"
- LC_CTYPE = "C";
+ services = {
+ postgresql = {
+ enable = true;
+ initialScript = pkgs.writeText "synapse-init.sql" ''
+ --Matrix:
+ CREATE ROLE "matrix-synapse" WITH LOGIN PASSWORD 'synapse';
+ CREATE DATABASE "matrix-synapse" WITH OWNER "matrix-synapse"
+ TEMPLATE template0
+ LC_COLLATE = "C"
+ LC_CTYPE = "C";
- --Whatsapp-bridge:
- CREATE ROLE "mautrix-whatsapp" WITH LOGIN PASSWORD 'whatsapp';
- CREATE DATABASE "mautrix-whatsapp" WITH OWNER "mautrix-whatsapp"
- TEMPLATE template0
- LC_COLLATE = "C"
- LC_CTYPE = "C";
- '';
+ --Whatsapp-bridge:
+ CREATE ROLE "mautrix-whatsapp" WITH LOGIN PASSWORD 'whatsapp';
+ CREATE DATABASE "mautrix-whatsapp" WITH OWNER "mautrix-whatsapp"
+ TEMPLATE template0
+ LC_COLLATE = "C"
+ LC_CTYPE = "C";
+ '';
+ };
- services.nginx = {
- enable = true;
- recommendedTlsSettings = true;
- recommendedOptimisation = true;
- recommendedGzipSettings = true;
- recommendedProxySettings = true;
- virtualHosts = {
- "vhack.eu" = {
- enableACME = true;
- forceSSL = true;
- locations = {
- "/.well-known/matrix/server".extraConfig = mkWellKnown serverConfig;
- "/.well-known/matrix/client".extraConfig = mkWellKnown clientConfig;
+ nginx = {
+ enable = true;
+ recommendedTlsSettings = true;
+ recommendedOptimisation = true;
+ recommendedGzipSettings = true;
+ recommendedProxySettings = true;
+ virtualHosts = {
+ "vhack.eu" = {
+ enableACME = true;
+ forceSSL = true;
+ locations = {
+ "/.well-known/matrix/server".extraConfig = mkWellKnown serverConfig;
+ "/.well-known/matrix/client".extraConfig = mkWellKnown clientConfig;
+ };
};
- };
- "matrix.vhack.eu" = {
- enableACME = true;
- forceSSL = true;
- locations."/".extraConfig = ''
- return 404;
- '';
- locations = {
- "/_matrix".proxyPass = "http://[::1]:8008";
- "/_synapse/client".proxyPass = "http://[::1]:8008";
+ "matrix.vhack.eu" = {
+ enableACME = true;
+ forceSSL = true;
+ locations = {
+ "/".return = "404";
+ "/_matrix".proxyPass = "http://[::1]:8008";
+ "/_synapse/client".proxyPass = "http://[::1]:8008";
+ };
};
};
};
- };
- services.mautrix-whatsapp = {
- enable = true;
- settings = {
- appservice = {
- database = {
- type = "postgres";
- uri = "postgres:///mautrix-whatsapp?host=/run/postgresql";
+ mautrix-whatsapp = {
+ enable = true;
+ settings = {
+ appservice = {
+ database = {
+ type = "postgres";
+ uri = "postgres:///mautrix-whatsapp?host=/run/postgresql";
+ };
+ whatsapp = {
+ # TODO: See https://github.com/tulir/whatsmeow/blob/efc632c008604016ddde63bfcfca8de4e5304da9/binary/proto/def.proto#L43-L64 for a list.
+ # This also determints the whatsapp icon
+ browser_name = "unknown";
+ };
};
- whatsapp = {
- # TODO: See https://github.com/tulir/whatsmeow/blob/efc632c008604016ddde63bfcfca8de4e5304da9/binary/proto/def.proto#L43-L64 for a list.
- # This also determints the whatsapp icon
- browser_name = "unknown";
+ homeserver.address = "https://matrix.vhack.eu";
+ bridge.permissions = {
+ "@soispha:vhack.eu" = "admin";
+ "@sils:vhack.eu" = "admin";
+ "@nightingale:vhack.eu" = "admin";
};
};
- homeserver.address = "https://matrix.vhack.eu";
- bridge.permissions = {
- "@soispha:vhack.eu" = "admin";
- "@sils:vhack.eu" = "admin";
- "@nightingale:vhack.eu" = "admin";
- };
};
- };
- services.matrix-synapse = {
- enable = true;
- dataDir = "/var/lib/matrix";
- configFile = "/etc/matrix/matrix.conf";
- settings = {
- media_store_path = "/var/lib/matrix/media_store";
- registration_shared_secret_path = "${config.age.secrets.matrix-synapse_registration_shared_secret.path}";
- server_name = "vhack.eu";
- listeners = [
- {
- port = 8008;
- bind_addresses = ["::1"];
- type = "http";
- tls = false;
- x_forwarded = true;
- resources = [
- {
- names = ["client" "federation"];
- compress = true;
- }
- ];
- }
- ];
+ matrix-synapse = {
+ enable = true;
+ dataDir = "/var/lib/matrix";
+ configFile = "/etc/matrix/matrix.conf";
+ settings = {
+ media_store_path = "/var/lib/matrix/media_store";
+ registration_shared_secret_path = "${config.age.secrets.matrix-synapse_registration_shared_secret.path}";
+ server_name = "vhack.eu";
+ listeners = [
+ {
+ port = 8008;
+ bind_addresses = ["::1"];
+ type = "http";
+ tls = false;
+ x_forwarded = true;
+ resources = [
+ {
+ names = ["client" "federation"];
+ compress = true;
+ }
+ ];
+ }
+ ];
+ };
};
};
}